@highflame/policy 2.2.1 → 2.2.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -421,18 +421,18 @@ export const GUARDRAILS_DETECTORS = [
|
|
|
421
421
|
exampleAttacks: [],
|
|
422
422
|
},
|
|
423
423
|
{
|
|
424
|
-
id: "
|
|
425
|
-
displayName: "
|
|
424
|
+
id: "bash_ast_classifier",
|
|
425
|
+
displayName: "Bash Operation Classifier",
|
|
426
426
|
category: "tool_safety",
|
|
427
427
|
stability: "stable",
|
|
428
428
|
tier: "fast",
|
|
429
429
|
inhouse: false,
|
|
430
430
|
model: null,
|
|
431
|
-
latencyP50Ms:
|
|
432
|
-
emits: [{ name: "tool_operation_classes", type: "Set<String>", modifiable: false, semantic: "category_set", description: "Operation classes
|
|
431
|
+
latencyP50Ms: 2,
|
|
432
|
+
emits: [{ name: "tool_operation_classes", type: "Set<String>", modifiable: false, semantic: "category_set", description: "Operation classes parsed from the command (e.g. file_delete, network_egress, privilege_escalation)." }],
|
|
433
433
|
supportedModes: ["enforce", "monitor", "alert"],
|
|
434
|
-
defendsAgainst: ["
|
|
435
|
-
exampleAttacks: [],
|
|
434
|
+
defendsAgainst: ["command_injection", "unauthorized_access"],
|
|
435
|
+
exampleAttacks: [{ title: "Destructive shell op", vulnerabilityId: "command_injection", snippet: "rm -rf / --no-preserve-root", expectedSignal: {} }],
|
|
436
436
|
},
|
|
437
437
|
];
|
|
438
438
|
// Semantic field → contributing detector ids (producesAttrs + normalizationAliases,
|
|
@@ -554,7 +554,7 @@ export const GUARDRAILS_FIELD_TO_DETECTORS = {
|
|
|
554
554
|
"tool_is_builtin": ["tool_risk"],
|
|
555
555
|
"tool_is_sensitive": ["tool_risk"],
|
|
556
556
|
"tool_name": ["tool_risk"],
|
|
557
|
-
"tool_operation_classes": ["
|
|
557
|
+
"tool_operation_classes": ["bash_ast_classifier"],
|
|
558
558
|
"tool_poisoning_detected": ["tool_poisoning"],
|
|
559
559
|
"tool_poisoning_score": ["tool_poisoning"],
|
|
560
560
|
"tool_poisoning_type": ["tool_poisoning"],
|